topic Re: How to enable port mirroring on SR2324P switches using Hivemanager NG? in Aerohive Migrated Content

How to enable port mirroring on SR2324P switches using Hivemanager NG?

lowk3y — Sun, 18 Nov 2018 22:56:58 GMT

How to enable port mirroring on SR2324P switches using Hivemanager NG?

Re: How to enable port mirroring on SR2324P switches using Hivemanager NG?

samantha_lynn — Mon, 19 Nov 2018 21:46:15 GMT

You'd want to do this with the following CLI commands:

(config)monitor session 1 source<port>

(config)monitor session 1 destination <port>

(config)monitor session mode

//We removed this configuration with:

(config)no monitor session 1

To keep these commands in the CLI even after a reboot or update, you'd want to create a supplemental CLI object with these commands. This guide walks you through setting up a supplemental CLI object in HiveManager: https://thehivecommunity.aerohive.com/s/article/Supplemental-CLI-NG

Re: How to enable port mirroring on SR2324P switches using Hivemanager NG?

rkowals — Tue, 04 Feb 2020 05:44:21 GMT

Sam,

I ran the command lines as instructed as above, connected my Wireshark application to the destination port and saved a few minutes of data. Our Vendor running a security device on our network wasn't able to see any unicast TCP-3 way handshakes. Any idea how to resolve this issue.

Re: How to enable port mirroring on SR2324P switches using Hivemanager NG?

samantha_lynn — Tue, 04 Feb 2020 20:13:22 GMT

Was the vendors security device plugged in to the mirrored port on your switch? If they were, would you be able to plug a computer in to the mirrored port and run a packet capture so we can get a look at what data that port is seeing?

Re: How to enable port mirroring on SR2324P switches using Hivemanager NG?

rkowals — Wed, 05 Feb 2020 06:03:57 GMT

The vendor device was plugged into the destination port. I sent you a running configuration file via email

Re: How to enable port mirroring on SR2324P switches using Hivemanager NG?

rkowals — Fri, 07 Feb 2020 03:24:54 GMT

Sam,, Were you able to look at the configuration file?

Re: How to enable port mirroring on SR2324P switches using Hivemanager NG?

samantha_lynn — Sat, 08 Feb 2020 02:48:38 GMT

Yes, sorry for the wait here, the mirrored port looks to be set up properly in the running configuration. In the packet capture we are seeing that the TCP syn packet isn't getting through. If you sort by protocol and look at the TCP traffic, you can see all of the TCP SYN packets are failing. That would explain why we aren't seeing the full handshake here.